itojun@iijlab.net said:

>	stock /etc/ssh/sshd_config should work (and works fine for me
>	on >20 machines i administer).  to install stock sshd_config,
>	# cd usr.bin/ssh
>	# make distribution
>	(it overwrites /etc/ssh/sshd_config, so be warned)

Turns out it wasn't ssh. It was libwrap. It seems that the treatment of
hosts.deny has changed.

I was using just a hosts.deny file with lines like:

rpcbind: ALL EXCEPT .rmkhome.com, localhost

That doesn't work anymore. A hosts.allow and a hosts.deny file are now
required.

-- 
Rick Kelly  rmk@rmkhome.com  www.rmkhome.com